Lucene search
+L

1311 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/15 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-91946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize...

7.1CVSS0.00427EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/14 9:17 p.m.5 views

CVE-2026-84564

An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result i...

4.3CVSS0.00179EPSS
SaveExploits0References8
NVD
NVD
added 2026/09/14 9:17 p.m.8 views

CVE-2026-84518

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...

4.3CVSS0.00258EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/14 9:10 p.m.29 views

CVE-2026-13265 IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker with MFT publish authority to obtain sensitive information or...

6.8CVSS0.00223EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 9:07 p.m.7 views

EUVD-2026-78151

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

7.1CVSS5.8AI score0.00385EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 8:47 p.m.5 views

EUVD-2026-77961

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

5.7AI score0.00134EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/14 6:22 p.m.4 views

USN-8739-2 imagemagick vulnerabilities

USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue...

9.2CVSS7AI score0.00884EPSS
SaveExploits0References16
NVD
NVD
added 2026/09/14 5:17 p.m.5 views

CVE-2026-57579

Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...

7.5CVSS0.00467EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/14 4:59 p.m.8 views

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

9.1CVSS6.7AI score0.95156EPSS
SaveExploits11
RedHat Linux
RedHat Linux
added 2026/09/14 3:08 p.m.6 views

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

8.2CVSS6.3AI score0.0024EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/09/14 10:21 a.m.8 views

kernel: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done

A flaw was found in the Linux kernel. A remote attacker could exploit a use-after-free vulnerability in the Transparent Inter-Process Communication TIPC cryptographic decryption process. This flaw occurs when a network namespace, a mechanism for isolating network resources, is deallocated before ...

8.8CVSS6.1AI score0.00513EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/14 5:15 a.m.12 views

Important: Red Hat Security Advisory: python-tornado security update

An update for python-tornado is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

7.7CVSS5.9AI score0.00572EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 4:52 a.m.10 views

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump CVE-2016-8462 was one of Pixel bootloader vulnerabilities found/worked out by beaups and Jon 'jcase' Sawyer. Disclaimer This is a dirty POC that was never intended to be released, I just copied another project, spent a few minutes adding a few lines, and sent i...

5.5CVSS6.5AI score0.00306EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/14 12:00 a.m.9 views

AlmaLinux 8 : osbuild-composer (ALSA-2026:67148)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67148 advisory. crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec CVE-2025-22866 crypto/x509: golang: Go crypto/x509:...

7.5CVSS6AI score0.00798EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/14 12:00 a.m.4 views

ALSA-2026:67148 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/12 8:18 p.m.7 views

CVE-2025-24813-PoC

CVE-2025-24813 – Proof of Concept 📖 Overview This repository contains a Proof of Concept PoC for CVE-2025-24813 , a vulnerability affecting affected software/product name here – update based on advisory. The PoC demonstrates the issue in a safe and reproducible way , to help researchers, defender...

10CVSS8.3AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/12 4:37 p.m.12 views

CVE-2018-1313

This repository does not have a README...

5.3CVSS7.2AI score0.04504EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 3:49 p.m.13 views

W3TotalChache

W3TotalChache Testing for CVE-2019-6715 Arbitrary File Read/ CVE-2024-12365 SSRF/Info Disclosure usage: python3 w3tcscanner.py -u https://example.com -f /etc/passwd -d 3 import requests import argparse from urllib.parse import urlparse def checkw3tcversionurl: try: response = requests.geturl,...

8.5CVSS8.1AI score0.19396EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 3:00 p.m.7 views

CVE-2024-50848

CVE-2024-50848: XXE en WorldServer v11.8.2 Una vulnerabilidad de tipo XML External Entity XXE en las funcionalidades de importación de objetos y de memoria de traducción de WorldServer v11.8.2 podría llevar a acceder a información sensible del sistema y ejecutar comandos arbitrarios mediante el...

6.5CVSS6.2AI score0.01206EPSS
SaveExploits0
NVD
NVD
added 2026/09/12 1:16 p.m.13 views

CVE-2026-90547

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate user permissions in the Bookmark plugin getBookmarks.json.php endpoint, allowing unauthenticated attackers to read chapter names from password-protected videos. Attackers can query the endpoint with a video ID...

6.9CVSS0.00244EPSS
SaveExploits0References2
Rows per page
Query Builder